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g TJaSTI-S a 

lo CgJESTIOJB REFERRING TO 
CRYPTANAL7TIC RESULTS CP. PROCEDURES 

A 0 United States Systems 

— 3 Who first solved the American strip system? Hon much infer- ? 
ration concerning this system wa3 exchanged and with when? 

2, How did cr.7/Chi obtain the code and deciphering tables of tho 6 
Military Intelligence Code? 

Bo Russian System 

3* Give details concerning the Russian Army maneuver code which 7 
you said was broken in 1930, 

4c METT1G has stated that the Finis 3ent Russian 5-letter traffic 8 
to CSCW/Chio Do you know about thi3 traffic? When was Russian 
5-letter traffic first noted by the Finns or Germans? 

5» What cipher machines were used by the Russians and the Balkan 9 
armies or governments? When were they used? Wen any 
captured? Do you know anything about Russian machines of a 
type similar to the T-52? What do you knew about Russian 
agent systems? 

Co Jugoslav Systems 

6o HERZFELD c£ Offl/ln 7/71 has stated that instructions for a IT 
Jugoslav additive system *ero found in a cave near Drvar, 
Have you seen thi3 material? V/hat became of it? Can you 
describe the Jugoslav additive systems? 

D„ Polish Systems 

7o Describe the development of Polish systems after the First 31 
iVcrld War* 

3„ Was any examination undertaken of Polish traffic connected 19 
With the Polish Lublin Government? What was known of this 
traffic? 

E 0 Finnish Systems 

9 a Did CK7//Chi ever attempt to solve Finnish systems? What 20 
kind of systems were they? What success did CKff/Chi have? 

F 0 Unidentified Systems 

10o Have you heard of 30-letter traffic with indicators which 
seen characteristic of one-time pads? 

Go Machine Systems 

11. What do you know about the Olivetti teleprinter? M 
Have you ever seen it? F 

12 o Tcu stated in oral interrogation that you believed the 21 
OLivettx machine had been shown to the United States Navv 
How did you know this? Give details. 

3 
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13« "a-:at do you know of the history of the "Gross© Teknik"? ZL 

iio V;hat do you leicr/ about French machines, in particular, 23 
the B-221? Ware sr.y raptured? Ey ohoa were these 
s&chinse studied? 



Ho QUEST ICS REFEREES TO CRYPTOGRAPHIC PROCSDDRES 

15. Describe the Gorman Etligna, the SZ UO, 42, and the SG 25 
Cn nhat principle did they Kork? Ho?J secure -sere these 
machines considered? '.Tno could best knew about these 
matters? 

16c Describe the weaknesses of the Enigss discovered by 25 
iffiNZERo How vara these iveaknsssss counteracted? '.7a3 the 
discovery of these nearnesses used in the e;;22:3.naticn of 
the gachines of other countries? 

17i ?&ra you consulted on cryptographic security studies;, 31 
invest ligations f and records cade by HDSCTEKHAXH? Vfnat 
became of these studies? 

lSo TJhat do ycu know of UEXZER's Schluassels cheibe and 31 
Sch3.u e3se2.Ic5.sten? Can you describe their method of 
enc ipher.usn t ? 

19o In the Ssh lues se'^stcn is the slide returned after each 2k 
enciphonsent or only men necessary? 



XIZo SECRET WS AND ifICF.C?HGrCQRARTI 
20, What do ycu know about escret ink and aicrcphctography? 35 
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I. QTEBSTaXBS F(SrSRRinG TO CKPT/aifiLITIC RESULTS C3 F2< 

A. United States Sggtega 

1. Who first eolvad the American strip system? Hew teach information 
concerning this system was exchanged and with whom? 

The question who first solved the American strip system might ho 

answered meat correctly hy Regiorungsrat Dr. VEISSER 1 and Regicrangsrat 

SCHULZ. 2 To the heat of my recollection the matter was as follows: hy 

courier frcn Rome came a description of the solution of this cryptographic 

system which more or loaa aotonished my unit hecauso the problem involved 

was certainly one of the 1203 1 difficult problems of cryptology. Chi did 

not think Rome competent to solve it independently hut the character of 



1. Dr. Franz WEISSER was a member of Section 6 (England, USA) of Group 
a, Main Group B of 02W/Chi. Ee was interrogated by TICOM in I9h6 
and at that time gave the following account of tho eoiuticn of the 
American atrip cipher: (TICOM/l-201, p. 3) 

"After the Marin© Bureau (I2AI3E) had solved a system which was. 
C although the etrip syets-a was in the beginning rather primitive) a 
remarkable feat because it was a new hind of encipherment which had 
at first to be recognised, in May l$kl a log of strits covering all 
European traffics came in from Japan. After the introduction of the 
now system, solution wcrk not in on a big scale in 027/Chi by 
EUETTEHHAin and Br. FRANZ, and in the Auswaortige Amt by Kl/ks. rather 
in rivalry than collaboration. After several months work, theAus- 

ggo rtigo Amt succeeded in solving the system with tho aid of 

Hollerith machines. Work for tho next system was continued on a 
still bigger scale but without any success. From the Anglo-American 
department, Herr Helmut SCHULZ worked as liaicon. Ho could have pushod 
•cho work forward, but he was hampered by tho incapacity and vanity of 
Dr. FRAI7Z. A big help would have been Herr VGEGEL3 who had solved a 
similar system and who volunteered collaboration, which was refused as 
he was not considered competent, not being an academician. Tho small 
Finnieh staff under Colcnol EALLAMAA also collaborated ouite effective- 
ly giving hints. Thus it found out that the syatea3 used in different 
countries after some time emerged eeain in other countries. La-oer on. 
one atrip syaxem was applied in such a complicated way that work be- 
came hope lose. It was not abandoned, however, until the last phase of 
the wsr. 

In addition to' the above statement of W2ISS2R, there is available 
the detailed account written by Dr. FRAHZ in 19':-6 and issued es DF 

2 - ? olfflUt SCfU^ ^s mentioned by FEEGR as a member of Section 6 

^ngland, USA), Group b, Main Group 3 (DF 187-F) . He has not been 
interrogated by TICOM. 
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the report made the impression of being absolutely genuine. Thereupon the 

problem was worked on at Chi and the vox's yielded results. About' the same 

time very intensive vox's on the same problem was done at the Foreign Office, 

for a long time without cuccess but later with success. I think therefore 

that the primary solution was found in Rome, whether independently or after 

securing certain basic documents regains for the present uncertain. Then 

Chi worked on the case carefully, finally the German Foreign Office and 

Helsiogfors. Hence the fact of the solution of the strip system was known 

to Rome, Chi, the German Foreign Office, apparently to the Forschungenmt 

through the Foreign Office, Helsingfors and Budapest. Borne itself and Tokyo 

wore not acquainted with the fact that solution tad been euccessful because 

no furtherance of the work was expected as a result of iu?:"orming these offices. 

2. How did OKW/Chi obtain the codo and deciphering tables of the 
Military Intelligence Code? 

This has to do with the period shortly before the departure of the U.S. 
diplomats from Bucharest or Budapest. Burner of I9bl (?). CiCf/Chi naturally 
was interested in reading rssnciphered messages of the U.S. Government because 
it was to be expected that their content would be of moment. Attempts at 
solution failed. The work suggested a complicated reenciphc-rment, apparently 
changing often. For between tolegraas ovon of relatively close date there 
were no parallel passages (repetitions cf groups of letters). It was sus- 
pected that perhaps thore was a dally change as was characteristic for U.S,A. 
tables. Thereupon work on the traffic ceased. 

One day I received courier post from Kcme. In It was a U.S. cede. The 
attempt to solve by this code the unsolved traffic was done only by sampling 
and naturally had no success. In any event the reencipherment could not be 
7 * fl ""*~"* v, "oted . Some months later I received by courier post from Budapest 
soma reoncipherment tables, clearly of American origin. If I remember rightly, 
each of these tables had a serial number and an indicator group, then a hori- 
zontal plain alphabet and some substitution alphabets. According to the 
instructions for use, such a table wa3 valid only for a limited time; I believe, 
several days. I then had an experiment tried to see whether the tables and the 
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coco went together. In about 023 hour zsj expert told as that the osperlissat 
had been successful; for CUtf/Chl had messages fitting Into the period of 
validity. STroa this fciaa on the meesages were read even when there were no 
tables available. The break-in was accomplished by using stereotype tele- 
graphic phrases. I think this syetem vae also used by the U.S. Military 
Attache in Cairo. The roeocipherment nsaterial was photostated. I vas told 
it had been removed temporarily from the baggage of a U.S. Ambassador depart- 
ing from Bucharest (?) Budapest{?). (My assumption is as follows: When the 
U.S a Ambassador was leaving Bucharest before Sov.sania's entry into tlia war, 
ho had a stay of some hours in Hungarian territory. At that titts hi3 baggage, 
which may not have been sealed, was opened and the roencipherment was photo- 
Stated . ) The originals wore- supposed to have been returned promptly and un- 
noticed. That is the story which vas given me. I do not know whether it 
corresponds with the truth. If this system and not the strip cipher was 
used by the U.S. Military Attache in Cairo docrn to the battles around Tofcruk 
but «ras then replaced, that may have been in connection with the introduction 
of a cipher Tiachine. However the War Depar'aaont may aleo have heard something 
to the effect that this syetom had been compromised. 

Regarding this affair Heglerungerat Helmut SCHULZ probably is better 

informed.- In June 19^5 ho was in Weihenkircben near Bed Aibiing. 

B. Huasian Systems 

3. Give details concimir;3 .the Bu3Sian Armj' maneuver code which you 
said was broken in 1930. 4 



3. SCHULZ was not interrogated by TIC CM, but ^ISSSR's statements corres- 
pond to j-SMSK's. iSlSSER also adds oosi9 notes on the method of 
solution. (TICCiMA-201, pp. 1-2). 

k. Apparently the question vas baaed on a remark of FEHHER which has not 
bv3en recorded in the roporbs of interrogation. Elsewhere in his re- 
ports, 3T2NI33 seems to have recognised only QJK-5, 6 ? 7, and 8 as 

" ^ on by OSW/Chi. Cf. the oral interrogation (TIC0il/l-20i) 2 
_ _ - u — codes, known as CSK fobschchij kcmandlr kod) 
5, 6, 7, and 8 were reed from 1939 tc 19*1. CEE-5 vas captured after 
they (0K,</Chi; had read it, and they also captured copies of 6, 7, and 
8." Cf. elso the written report of PHSSR (DP 137 -B) : "TrOB their 
first appearance to the summer of 1943 the cryptographic systems "CET 
and their successors were worked on and solved. I think the first 
system of this kind vas "CK-5". I am sure that 0K-6 and CK-7 were 
solved end later, I believe, GS-8 as well. If I remember rightly, these 
were 4 -digit cedes vrith partial reenclpherment by 2-digit substitution 
tahles . " 
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Chi solved Ruasian Army systems currantly from the First World War on 
end went through the entire development from the 3implo substitution systems 
to the codes reenciphered by additive. But what system the Bed Army used 
during its maneuvers in 1930 I cannot tell. I have become acquainted with 
hundreds of different systems but have carried as few as posuible around in 
my head to such a degree that I cnuld give any information regarding them 
16 years later. Judging by the time, it must have teen CKK-1 or OKE-2 be- 
cause QKH-1 was supposedly compiled in 1929. I presume it was a 3-digit code 
which at best was reenciphered with a partial digit substitution table. Such 
a development would fit in best at that time. 

h. METTIG has stated that the Finns sent Russian 5-lotter traffic to OKW/Chi. 5 
Do you know about this traffic? When was Russian 5-lettor traffic first 
noted hy the Finns or Germans? 

METTIG was with the Army Cryptologic Agency (OKH/ln 7/Vl) before he was 
transferred to OKW/Chi. What he reported regarding 5-place Russian traffic 
with the cryptologic service of Finland clearly refers to METTTG's activity 
with OKH/ln 7/71. Furthermore there la an error here: Soviet Russia had long 
since accommodated itself to international conventions and, as a natter of 
principle, sent all radiograms in 5-place groups. Therefore, there never were 
any Soviet Russian radiograms which would have been characterized by the fact 



■j>. FEMER it is noted, rightly takes exception to this statement, 

TICCM/I-78 is tho interrogation of METTIG on the history and achieve- 
ments of GKH/ln 7/VT, the Army Cryptologic Agency, which he directed • 
from November 19*1 to June 19*3. TICOM/l-96 is the interrogation of 
METTIG cn ohe history and achievements of OZW/Chi. of one of whose 
groups which he was the head of from December 19*3 to the capitulation, 
May 1945. In TICCM/I-78 METTIG states that a copy of the Russian 
5-figure code was given to OKE/ln 7/71 by the Finnish General Staff 
during the Busao-Finniah War. Ee also stated that QKH/lc 7 At 
successfully eolved in April 19^2 the now Russian 5-figure code, and 
that frr- - - ^isore traffic was collected at Loetzen 

S^oup for Russia) and that some of 
it was currency read. FEHHEB is therefore correct in referring this 
statement to OKH/ln 7Al rather than to CKW/Chi. In his discussion of 
the relatione of OHW/Chi with the Finnish Cryptologic Service, FISKER 
states xhat in contrast to Budapest, it was not so much the intercepts 
from Eelsingfors which played tho decisive role as it was the exact and 
successxul cooperation of OEW/Chi and the Finnish Bursau in the field 
of practical cryptanalysis" (DF 187-D). 
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that they had 5 places in the group. Thus even the cipher OKK-5 end its 
successors were sent in groups of five. When MECTI& came to OZW/Chi abcut 
the fall of 19^3, the cryptolcsic service of Finland had no contact with 
OKW/Chi in the field of Russian Army systems, out was working with the Amy 
Cryptologic Agency, where I become acquainted with the Finnish officer, 
MIEK-OJA, whoa I have mentioned elsewhere. 6 The cryptanalytic service noted 
5-place groups even during the First World War. When the cryptologic unit 
of the Boichswehrminiatgrluin started work, the Russians were again using 
5 -place groups on the radio as a rule. And when Finland began work in 1J27 
at the latest, the Russian Array radio traffic was in 5-place groups almost 
without oxcoption. Deviations were on exception and probably a punishable 
error. 

5. What cipher machines were used by the Russians and the Balkan 
armies or governments? Whsn wore they used? Were any 
captured? Do you know anything about Russian machines of a 
type similar to tho T-52? What do you know about Russian 
e«ent systems? 

I tow nothing about Russian secret teleprinters and have never seen 
such a machine. I do not know anything sure about Russian agent traffic 
because I never had in my hands any actual traffic. I have received single 
statements of deesrtsrs and prisoners. Inasmuch as there was no traffic at 
hand I was not able to check their statements. Ostensibly the crypto- 
graphic systems of Soviet Russian agents were based esceutially on the use 
of a 2-digit substitution der> 0 d from a prearranged indicator word. This 
had no variants and was roonciphered by an additive sequence which wan 
derived from a prearranged sequence of digits. For example: Indicator = 
STALIN. Then O 01, 7 = 02, *= 03, Oh, H = 05, H = 06. B = 07, P =: 
08, r = 09, il — 10, 7? — - « — -v_ %h QtC j followicg th0 Euasi£Q alpha ^ 
For reencipnerment *ne oii-cn aace __. 10.25 might have been used. In this 
primitive case this 6-place number would merely be added "symbolically", 

. 

6. DF 187-D, p. k. 
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i. e., modulo 10, to the test obtained by substitution. In other cases the 
birth date was used to derive the additive sequence. The agont would then 
de^-iv© the following eequences of digits: 

221023.1 = 221025 

221025.2 = 22201*10" 
221025.3= 6630615 

221025.4 = 8840820 

221025.5 = 1010501025 

221025.6 = 1212601230 

221025.7 = I4l471l435 

etc. 

And from the sequences of digits comes the edditive sequence: 

2210252220^1066306l5884o82010105010251212601230Ul4711i>35 

431277^245162936763621*802111155112763338613531555162578 

This additive sequence v*b added symbolically. Reports on cryptographic 
eystoms of this kind were meroly noted but not worked on in my unit tecsuse 
that would have exceeded the boundB of my activity. On the other hand, I 
assume that First lieutenant Dr. vTiUCK worked on chess rather carefully, al- 
though I cannot recall that he broke anj Russian agent oyctema after the- fall 
of 1944 when ha was transferred to my group. The example I have given is only 
one of the vast number of variant* of this principle. In case cryptograms 
of this kind had appearad, thoy vould have had to bo worked on as though the 
additive were unknown, since only after solution could the construction of 
the additive itself be discovered. 

The sanding in of single ciphers of this kind, where it was impossible 
to prove whether thoy wore genuine or not, was of value only for information, 
the practical value was virtually nil. For the rest, I ohould like to r 3 f e r 
in connection with this quests ■ ~" - -^. et Russian, Colonel 
SACHAR07. interned in Haus Alaska, who knars the Russian agent system thoroughly 

Translator's noto: Error, which is repeated fcelcw. 
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and can perhaps give information yarding the Soviet Suasion agent ciphers. 7 
I c - Jugoslav Systems 



6. HERZFELD of OKH/ln 7 Al has stated that instructions for a Jugoslav 
additive system were found in a cave near Drvar. Have you seen thi3 
material^ What became of it? Can you describe the Jugoslav additive 
systems? 8 

I assume that the Jugoslav army systems are involved. I am not acquainted 
with them and the event mentioned was not known to me; nor do I know what bocame 
of the material frcm OKH. 



7. Describe the development of Polish systems after the First World War. 

When, after the First World War, the new Polish Stats had to supply its 
diplomatic representatives abroad with a means of making confidential and 
secret reports and of receiving orders with like classification, recourse was 
had to means known to all civilized people since the 50»o of the last cantury; 
a oryptographic system which cculd be sent by telegraph. So it was not sur- 
prising that soon secret dispatches wore being conducted to their destination 
by cable and radio, dispatches bearing the addresses "Polraission" "Polextern," 
"Militpologne" - whose meaning requires no explanation. 

When the Cryptologic Bureau of the P sichnwohrmi ni a t gr iua began work on 
these msoeagos, a few government cryptographic systems might have been 



7. See DP 1G7-P, p. 19 for SSNKSB's discussion of the work of Dr. VAUCE, 
who was heed of a unit working on agent traffic. As was stated in * 
• DP 187 -F, note 38 (p. 22) during his period of interrogation, SENDER 
was interned in the European Command Intelligence Center (ECIC) at 
Eaus Alaska, a private residence at the Center which was reserved for 
important persons under interrogation. SACHAK07 was interned there 
at that time and was being interrogated by the Director of Intelligence 
European Command. No TICOM interrogation of SACHfiROV was undertaken. 



D. Polish Systems 
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introduced and replaced, eo that we can eay nothing about them. It is also 
posaihle tfcat the messages which Chi first studied early in the 20 's of this 
century still represented the type of the first Polish Government cipher: 
5-digit groups with parallel passages within the same message and among 
telegrams of the same date; on the other hand, no parallol passages among 
telegrams of different rays. The length of the parallel passages was always 
h or a multiple of k 30 that there was no reason to doubt that the basic system 
was 4»placs, i. o., a 'i-digit code. The parallel passages collected for a 
study of tha reencipherment showed affinities, the regularity of which could 
not be disputed: if , for instance, cn 1 October there was a parallel r.aeaago-- 
^35^ 7355, than cn 2 October there would to found the parallel passage 106l 
9066, and likewise, if yesterday a frequent group had the appearance 8579. today 
a group would appear reading 5=693 end having about the same frequency, i. e., 
would occur about a3 frequently percentually. On the basis of this observa- 
tion and do-.iena of confirmations it was natural to assume that a 4-digit code 
had been re^nciphsred by a simple substitution table which might have appeared 
as follows when partially solved: 

2 October 

0 - 

1 - 

2 a 

3 ^ 0 

4 = 1 

5 - 6 
6 

7^9 

8 = 2 

9 3 

Work on the traff ic of each day led to the same pheccneoa. The correctness of 
the assumption was thus confirmad and the next step could only consist in making 
all the still hetorcgensous traffic homogsnon'^ ■ ™ as if 

for reenciphermeat only one and the eaae substitution table fro* aujong tha 
arithmetical conceivable 10.' - 1 permutations had been used. This procedure 
is called reduction to a relative basic code. It is accomplished by comparing 
the largest and most accurate batches of daily traffic available, regarding 
one of them 23 "plain", i. £B not reenciphered , while the others were reduced 
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to this. The work of reduction itself ran along in schematic fashion. The 
method la probably the same among cryptolcgists of all civilized countries, 
honce a hint suffices. 

The following page shows a section of the count of the day's traffic 
taken as basic code (black), fc-digltj the count of the second day's traffic, 
also ij-place naturally, (red), and the count of the third day's traffic under 
tho same conditions (blue). If black 1365 is the scut frequent group in batch 
one and 0128 the most frequent group of batch two, while 5^31 is the most 
frequent group of batch three and at the same tine groups IA56, 0682 and 5713 
might correspond, ye can elready carry out the following reduction: 

Black Red Ei Ue 

0 

■ I 0 5 

3 1 k 

k 6 7 

6 2 



7 
8 
9 



3 



It is obvious that by other comparisons supplementary values will be 
found so that if enough traffic is received the messages can be reduced to 
"black" to sujply initial material for breaking the cede. 

Thus the problem of the fc-diglt code reenciphered with a simple digit 
substitution table was solved, but at the same time it was proven that such a 
system do©3 not satisfy modem security requirements. 

How If a system had baen selected which was not in and of itself socure 
enough to safeguard state secrets, the solution of the daily changing reenciphor- 
ment was further facilitated by the fact that Warsaw itself introduced a 
facilitation wiich was not a necessary consequence c" 

the result of shoughtlessness -and convenience. In comparing the successive daily 
keys of a month, certain systematic sequences were found which made It possible 
to solve the rcencipherment of days vhen traffic was so light that its 
statistical picture would have been indefinite and also to derive the substitution 
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tables oven before a single telegram had been received for the day in question. 

Obviously the reenciphermont tables for a month were printed on a single 
sheet of paper. The official charged with the production of these tables made 
the job easy for himself and neglected the one thing which would have been the 
only correct thing in such cases, namely the use of the "lottery system" in 
order to exclude any systematic character, including involuntary but 
psychologically comprehensible ones. So the tables looked somewhat as follows: 

. Ig345678 910111gl 31 } M5l6l7l3l9gQ2 1gg23g4g5g627g8g9?0^1 

0 *> 9 3 9 1""5 U 2 2 0 — 3 5~T 

1 0 3 9 1 6 1 5 if 2 4 0 g 3 3 1 1 k 
230135 15 If 2 04 3 2 0 1 3 1 L 

321053 15 4 g 0534 10 3 1 ho 
4125093 l 0 1 J 42 

5^52 3 0 3 1 0 1 

6546270 3 10 1 
796472 043gOi 1 
8787 4 824020 l ] 
98 7 8644220355 

Systematic features like this and others occurred by the hundreds ana constituted 
the rulo while lU32 y 8 tGi 3a tic tables W3re the exception. And even though these 
systematic features could only be regarded as partial, nevertheless in count- 
less cases they facilitated the work of the cryptanalyst because, if part of 
the month's table was solved, ha already recognized approximately how the table 
for th3 following day would appear. 

When this system hod been used for seme years, it was replaced without 
warning by a new 4-digit code which was reenciphored by means of additive 
seances, (i cannot give the date without reference to an archive, but do know 
that the new eyataa had already been in use for aoce months at the time of the 
so-called mall box conflict in Danzig. ) 

Critical examination of the secret text, 1. e., attentive scanning of the 
new messages without preparing any counts, gave a very different picture. *** 
natter of parallel passages had become very much less, their xengxn 
multiple, the basic code was therefore clearly 4-place, which was again con- 
firmed by the fact that the interval between parallel passages had regained 
a multiple of four. A frequency count which was now made yielded an absolutely 
colorless picture, in other words there must be a reenciphermont which permitted 
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virtually every digit of the secret text to occur equally often percentagewise. 
Since an additive sequence of sufficient length ia known by experience to pro- 
duce such an effect, it was assuaea • 1th great probability that an additive 
sequence was involved. Fro* the occurrence of parallel passages the so-called 
phase or period was recognised as 4-placo and the nezt Wk was to seek out 
enough homogeneous material that had been reenciphered with ono and the sane 
additive sequence. The introduction of the additive sequence meant a groat 
advance oryptcgraphically. But again Warsaw lulled itself to sleep in a 
feeling of security which was subjectively intelligible but which could not 
stand up against objective critical study. The additive was short and was 
always in use for so long a ti» that enough neesages were accumulated regularly 
to be able to solve the problea successfully. For this purpose use was mrdo 
of a nsethod which is surely coesoo to all cryptanalyots in zaodern civilized 
countries, the difference ffiethed, which from an arithtaetic point of view 
consisto in the fact that like differences of two groups standing in the K" h 
position (of the additive sequence) and in the K 0 th position (of the addi- 
tive sequence) apply to the sees code groups. 



k-ra.. 



.... 

7322 



3433 

Diff. 4976' 4 976 

However that is also the difference between the plain code groups 2^5 
and 6211. 

Since only in very rare cases is a reduction to the true basic code possible, 
reduction is generally to a relative code until enough homogeneous material is 
assembled to perait an attest at the breaking of the code. The Polish exchange 
of aeasages was always so lively that the necessary amounts of traffic were 
always available. Thus again the security of diplomatic state secret* was not 
high enough, in spite of the use of a eyste* which was modern in and of itself 
the Mistake had been sade of sending enough traffic with short additive sequences 
to coaprcniso the systea itself. 
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It must be assumed that later on a competent critic appeared in Warsaw 
who recognized the disadvantages of this system and called attention to then, 
posnibly an officer (Lieutenant Colonel SZCZEZI5SKI ?) . For foe cart improve- 
ment consisted in lengthening the additive sequences. The use of a k -place 
number series was due of course to a want of imagination: 40 digits are an 
integral multiple of if, vben the additive sequence has run out, the next 
group begins again with the first digit of the additive; on the other hand en 
additive series of 37 places used with a U-digit code would cot repeat until 
after k x 37 steps, i. e., would have practically H»8 positions. When Moscow 
becaee aware of this, the additive sequences were derived from this point of 
view; then however it was not long before longer series appeared which had 
over 200 digits. That was an advance for it happened again and again that 
telegrams were dispatched which wore shorter than the additive sequence and 
when traffic was scant entire messages remained incapable of solution. It is 
a well known fact that a thing which is theoretically correct must also be 
correct in practice. If there are contradictions nevertheless, then either 
the theory i3 false or a mistake has been made in practice. The theory of the 
additive sequence requires of course that the additive shall not always bo 
applied at the same point to the intermediate text (code test before it is 
reenciphered). m practice however, it « often different.' The cryptanalyat 
got the impression that the additive sequences of the code clerke vara kept in 
the table drawer and by force of habit wore applied to the intermediate 'text 
at exactly the same point as in a number of previously enciphered measages. 
At the Him this was observed an additive sequence was still used for a 
relatively long time, - I emmot say today hen, long, tat in any event for so 
long a tine that as a rule enough traffic was sent to make possible solution of 
che reencipherment. In this connection it was indubitably a mistake that 
between Berlin and Waraaw, for instance, the same additive sequence was used. 
Later, however, at least one defect was eliminated: the period of validity of 
the additive sequences was shortened. The consequence of that was that the 
amount of solvable material disappeared more end more and more, that is ever 
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fewer and fsvexj secret telegrams could be deciphered. However, Warsaw could 
not make up its Bind to give this system, which in and of itself is excellent, 
that stability in practice which it possesses in theory. And it was not until 
the. final months before the outbreak of the war that that level was obtained 
which the Polish Government ciphers might ha7a reached as soon as the additive 
sequence was introduced: in each direction on each link the additive sequences 
wore differ, nt, that is to say, in the traffic froa Warsaw to London the 
same additives do not occur as a catter of principle as in the traffic froa 
London to Warsaw; the sequences themselves are so long that thoy do not reappear 
even once within a message in most cases; the sequences have such a short 
period of validity that only in isolated cases is enough traffic available to 
be able to solve the reonciphoraent! Fcr months before the outbreak of the 
war Chi was therefore unable to solve a single Polish diplomatic message. Thus 
Warsaw had satisfied the requirements of a modem governmental cryptographic 
system: its nature was known, Its weaknesses wore known, hut it was used in 
practice in a manner corresponding to ito theoretical value and :onsequently 
protected the secret from all unauthorized tampering. 

When the war broke cut and the Polish Go-emment-in-Eziio began receiving 
and sending messages, it soon proved that what had once been learned had not 
been forgotten. They stuck to the Poonoiphonwnt by additive sequences. And 
corresponding to the impossibility of preparing and distributing under the 
prevailing circumstances as many additive sequences as wore necessary, thoy 
chose sequences which could be derived from extensive tables. Surely the 
Govornasnt-in-Sxile knew that this method is dangerous if the period of use ia 
long. But under such difficult circumstances it may have been beyond the power 
of those responsible to create anything better, for the disadvantages of these 
really rigid tables could be recognized in the course of time by a crypb analytic 
unit. Thus Poland could not prevent large nuahers of these messages from 
being read. Basically the replacement of the basic system and of the additive 
tables did not change this at all. But it would be wrong to assume that the 
solution of these cryptograms was easy. Weeks always passed before homogeneous 
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traffic in sufficient quantity r ould be accumulated and in view of th© per- 
sonnel shortage- at CM it waa not possible to work on those systems accordiug 
to the old peacetime methods, i. e., simply by hand. Instead, in order to 
have success, cryptanalytic aids, suoh as differencing machines and Hollerith 
machines, had to be employed if decipherment was to have any practical value 
whatsoever. Eowever, precisely this circumstance does not argue in favor of 
the system selected because the modem cryptographer must oount on the fact 
that the modern cryptologist will attack his systems with machines designed 
to save labor. And the rule remains, that every cryptographic eyeteri has Its 
innate degree of security which must not be overburdened . Whan this case will 
occur cannot usually be foreseen when a system i3 introduced, and far more 
frequently than a layman will assume the time of oxpesuro cannot be recognized 
by the user of a system because he very rarely has a chance to survey the 
"total consumption" of a system. The system known as "Militrologne" was like- 
wise worked on and its raoncipherseat was solved. I can only give its 
characteristics today with reservations : t-digit ccSo, reenciphered by a 
simple dig-it substitution table, hence no problem in and of itself.' Here the 
difficulty lay in another field : the amount of traffic available was not by 
any moans adequate for solution of the cede. So in this case too everything 
was known but success was not achieved because the innate degree of security 
of the system had not been reached, let alone exceeded. 

That Warsaw had not been idle and had not rested on the laurels of the 
infinite additive sequences which had become virtually Incapable of solution, 
was proven by some captured material turned in: military code books composed 
in several languages and designed for coHmanication in Polish, French and 

- during the preparation for and ezecution of largo-scale operations. 
Also from other code books and prepared reoncipheraents one could cot fail to 
recognize that Warsaw was taking pains to make adequate preparation for any 
eventuality. Even the exterior of these documents shewed that attention had 
been paid to the choice of paper, binding and makeup, so that a certain high 
standard had to bo assumed for the entire cryptographic work of the government. 
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Regarding the philological solution of the Poliah codes it may be stated 
that it vas not node easy by any nsans. This assertion becomes quite clear 
if we compare With Prance whoso diplomatic codes were also usually four placo. 
Whereas the Frenchman carefully encrypts every stem and every ending and 
insists on accuracy in grammatical form, the Pole prefers the opposite practice: 
often he only gives the stems and assumes that the decoder will have no 
difficulty finding the correct meaning on the basis of his politioal knowledge, 
10 fact that he will not even have to look for it as a rule. That is all right 
for him but the decoder is very much retarded in his work of interpretation by 
this method of encoding. Thus, while a normal French diplomatic 4-digit code 
can often be read after the recovery of some 1,500 groups, in Polish even 
25,000 groups wore not enough.' This fact deserves consideration as a proof of 
how important it is to assure by the very process of encoding that additional 
difficulties arise for the enemy cryptanalyat. 

However it holds true for the cryptographic work of tho young Polish 
State that even when advisers were surely not wanting, the development of 
cryptography goes ahead not by leaps and bounds, but organically related to the 
organism man, whose spiritual eye can, it is true, in fortunate hours see to 
great depths, groat heights and far distances but with this vision cannot 
force its dear fellow man to do what is rational. 

8 ' 5S! SS-^^r, UGderta]£sn of ^lUh traffic connected with 
tne Polish i,uoHn Government? what was known of this traffic? 

I cannot say with certainty I ever saw radiograms of the Polish Provisional 
Government in Lublin. However, I assume that among the numerous decrypted 
Polish messages there were seme of the Lublin Government. In type thece can 
only have been eubsti tut ions with additive roencipherment, whereby the additive 
*** ~~~ " f: - OEJ a ta " Dle - I* ™>uld be beet to question the former 

detailed official BESET* about this, otherwise Dr. HDST2E5HAIH 10 who was in 
closer contact with BHBBM regarding the reencipheraent than I was. 

9 - K?L£ Jnt^^S - «» ? of O^/chi. 

10. For FZHNSR'a opinion of HDEOTBWiaJH see DF 167-2, p. 16 and note 7. 
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E. Finnish Systems 

9. Did CSQl/CM ever attempt to solve Finnish systems? What kind 
of systems were they? What success did 0Zi7/Chi have? 

Dr. LUET-JEnJ 1 employed In ny unit, undertook investigation of ecmo 

Finnish Government telegrams around 19*0, without achieving any results. Since 

repetitions were not found in the testa studied, it was assumed that seme fora 

of transposition was involved. The question was not studied Eore closely 

because the work on other telegrams (Bulgarian) was more important. 

?. Unidentified Systeas 

10. Have you heard of 30-letter traffic with indicators which 
seem characteristic of one-tine pads? 

Yea, once, as far as I can recall, I talked with PASCHKE 12 of the Foroign 
Office about one-time pads, radiograms 30 letters long (constant), with some 
indicator words or other. We did not know what to do with such messages, 
however, because we did not even know theii nationality. I should guess that 
that was late in 19*3 or early in l 9 kh. However at that time, with our reduced- 
personnel, we already had go many worries trying to keep up the diplomatic 
deeryptaent that wo could not devote ourselves to work on traffic which la;/ out- 
side the limits of our assignments. 

G. Machiao Systems 

11. What do you know about the Italian Olivetti teleprinter 
Have you ever seen it? 

No, I have never seen the Olivetti cipher uaohine. However, it is known 
to HUSOTEAIN, to whom it was shows. In KEOTJHAIH's opinion the machine had 
not yet been sufficiently developed from a technical point of view and it 
delivered a secret test which did not afford adequate security against crypt- 
analysis, provided the machine was known. That is to eay the constants of the 
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machine outweighed the variables of the machine in their effect. 



12. You stated in oral interrogation that you believed the Olivett i 
machine had been shown to the United States Havy. 1 ^ £fo» did you 
know this? Give details. 

I never said so? I told the interpreter that H0ETF33HAHJ had seen the 
Olivetti cipher machine in Italy. Because of the preponderance of Italian 
naval officers EUETTSMAIN got the impression that the Olivetti had been 
pushed by the Italian Havy, consequently not by the Italian Army. I reported 
on that because Chi had to do only with Ganeral GAMBA, 1. e., with an of floor 
of th» Italian Army, while Chi had no contact with the Italian Havy! But the 
American Zfavy had nothing to do with the matter. Hence a pure misunderstanding. 

13. What do you know of the history of the "Grosse Tekolk"? 

The Swedish engineer, Boris HAGSLIH, developed late in the 20' e or early 
in the 30' s a cipher machine which, as I assume to be known, is based crypto- 
graphlcally on the principle of the virtually Infinite Trithetm, Ho accom- 
plished this by a number of gear wheol3 whc3e ratios were "prime" to one an- . 
other (11, 13, 17, 19, 21, 23) and so-called pin wheels -{ Bolzonracder ) whose 
purpose was to cause this period itself to run off in Irregular skips. A third 
aggregate, the so-called "baskst" had the task of effecting a substitution of 
the alphabets In the machine. The device, which was some 20 cm x 15 cm x 8 cm 
in size, wa3 developed as a "tape printer". Pressing a hand lever moved the 
entire mechanism by a certain "number of steps". A letter wheel had to be sot 
with the left hand, then alongside in an opening the corresponding cipher-text 
letter appeared after the lever was pressed. This device, which was excellent 
from the cryptographic standpoint, had the disadvantage of working relatively 
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Around 1933 HAC-SLUT offered his patents to the Goraen Eehraacht tare the 
sale did not case about because EAGSIIB supposedly wa3 asking ever one Billion 
narks. On a later visit he told ne himself that his devices vers being "outlt 
in France under license. 

A few years later it was Obvious from public advertisements that EAG3LIN 
had improved his naehino: ho had introduced a keyboard similar to that of a 
typewriter and had, eo far as I recall, a strictly mechanical type and an 
electro-mechanical type. Since Chi end tho Ordnance Branch had ideas of their 
own after 1933, one was content with the knowledge at hand and did not purchase 
any devices of this type for study. (?he purchase would hare teen very difficult 
duo to exchange regulations) . 

In the euasaer of 19^0 soze cipher machines were captured in the West 
which wore recognised as entoaaticaliy printing, electro -aeohanical Tekolk 
devices, Tho case was about kOOm X hOca, the height I should guess was 15 cm, 
I know of two EaoMnea out assure that the Ordnance Office <'4aJ?£ucf_7). nay 
have kept seme. So device was whole. I cannot toll today whether they were 
so-called page printers or tape printers, or whether they printed tho plain- 
text letters as a check (*& the cipher text). That was purely secondary eo far 
as Chi was concerned. On tho other hand it was teportaat thitt for deriving 
tho actual cryptogram the elements of the already known "little Teknik" wore 
used, namely: 

1. Gear wheels with the nonibor of teeth grins to o=e another. 

2. Pin wheels. 

3- Basket with riders. 

What was new was the fact that to acconplish the letter substitution wheels 
had been introduced after the Banner of the wheels in the German Snigaa. As 
power source a dry battery — , tMrJc ^ 5 

was a cable to enable taking transformed current from the light circuit. I aa 
no longer sure of the counting of the individual parts end their effect. {Since 
there was apparently no traffic fro- these machines and since I could never find 
out whether they bed been used by the English or the French, the purely oryptolcglc 
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interest was exhausted . ) However, the cryptanalyst and the machine specialist 
-rere interested in a small cylinder which was missing in every machine. As I 
recall it this must hare been about 4 cn long and about 3 cm in diameter. It 
was placed between certain electric poles after the manner of a snail Enigma 
wheel and in our opinion signified an additional individual security factor. 
I no longer know how many polos this body had on its faces. However, I aeoumed 
at that time that there must be a very great number of such supsrsacret wheels, 
and that the device would not function at all without suoh a wheel was clear. 
Hence the machine could be left standing open on the table but as often aa It 
was used such a wheel had to be inserted by the person in charge (officer, 
official) . I requested that a search for such wheels ho made in all depots 
and factories of the occupied territory, but got no results. Consequently no 
machine could be put in a condition whore it could be studied and used export- 
mentally. 

However,, on© thing was clear to se and to my associates Dr. HOBTIEHEAIB 
graduate engineer BOTSCHSIDT, and MES238* that HASSLE? had von a good heafi 
start and that the device must bo theoretically very good for use in a fixed 
installation. We could set up no rule for the solution of the individual 
Teknik message; of course we did not know either whether the device has any 
technical defects and is "subject to disturbances". 

This device did not reach us in tine to have any stirsulating effect on our 
own ideas. Toe machines we had were taken along by ME82Z8 when he and his group 
were separated from us in 19U; what hecaie of tfcea I do not know, MMZEB 
tinkered around on one device but I do not believe be over got it operating 
properly. I should surely have heard of it. 

Judging by its appearance the machics <-7ac n~*~~*++Ai- *~nt in a stasis 
dependable fashion and could be calleo a pises ox goon ciever worteanshlp, 

lk ' SltJ^! 1 "! Fr ° aCh nachlneB ' in particular, the B-21U Were 

any captured? By whom wore these machines studied? 

There were some captured Hagelin B-211 at Chi. Same size as the small 

Hagelin. On the letter wheel in the left comer the letter V was missing, as 
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far aa I recall. I have already described the basic principle of the Internal 
structure in another place. Ho other French cipher Eachices are known to Be, 
for the big Hegalin which printed the cipher tart by jasane of a keyboard and 
typo was probably used by the English. P.egarding the possibility of solving 
B-8U saassagoa the erroneous idoa has beon expressed that OStf/Chi solved the 
B-211 Eeesages. That is not correct. I sorely knov froa conversations with 
WJBTWBKn that under certain circunstanees the B-211 yielded cryptograms 
which could bo solved. Horover I cannot tail you anything about these conditions 
because I an not adequately informed. Porhaps OSH pursued this prohleia with 
greater care and actually forced a few solutions. 
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H. QUESTIONS MKHUUUJU TO CKYPTCGBAEEIC P20CEDUEES 

15. Describe the German Enisca, the SZ ^0, h2, and the Si kl. 
On what principle did they work? How secure were these 
machines considered? Who could test know about these 
natters? 

Many hundreds of the Enigma used by the German Wehrmacht were lost. 

Therefore I am firmly convinced that some are in American hands. If I were 

to try to give the desired description vithout having one before me, I should 

run the risk of being incomplete *r even erroneous in ay statements. It 

might therefore be more to the point to apply first to American experts. 

The devices kO, kS and kl I ,annot describe at all because my knowledge of 

such devices is not adequate. Those who were occupied with these devices 

include: Br. EUETTEEHAIN arc HETZE3 of my unit, also graduate engineer 

ROTBCBHHr, ^lESSSCET (Dr. Bag.?) and Dr. LCTZE of the Ordnance Office 

( Wa Pruef 7 ). Possibly Georg BCBSOZDHS, former Miniaterialdirigont in the 

j^ rschungsamt can givo ioforaacic-n regard icg theeo devices since, so far as I 

know, he was a member of the commission for devicos of which HUETTE3EA1S was 

chairman. Probably HUETTEJQL^IE can giro the bast information. 

16. Describe the weaknesses of tho Enigma discovered by MEHZEB 
how were these weaknesses counteracted? Was the discovery 
of these weaknesses used in the examination of the machines 
of other countries? 

I had no active part in the latest development of the Enigma. Ia caas 
a new model was introduced during the war I an no longer in the picture. But, 
nevertheless, it is probable that nothing essential was changed in the basic 
principle. 

I assume that at least one undamaged model of the Army Enigma is to be 
found in Washington since many chines were lost. If all the bulbs still light 
up, I suggest making the following experiments: 

1) If in any random vheel positions key "A" is pressed and if 
at the same time the lamp field T lights up, then in the same position 
pressing key TP will light lamp field "A" . Experiments with the other 
keys would always lead to the discovery that two letters are always 
related "reciprocally". From this It follow that in the system of the 
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Soiijiaa t*MN) «««» "r»aripra.«l wyKrVVWW -, 3 .itp-j.iL«>L. r flow with 26 
Xs*t«ra p tba .i&ffcft** tHt- *h«ml« jf sttetttott-an ai^labets le 
1 i 2 x 3 ....25 x 26 = 26.' On tho other hand, the number of reciprocal 
substitution alphabets with 26 letters in the alphabet is only 
(26 7 2)! = 13! This la a weakness inherent in the machine and one 
which cannot be eliminated because it is conditioned by the construction 
of the machine, its circuits and switching. But in the entire Enigma 
system only 13 J different substitution alphabets occur. Hence, if one 
succeeds in solving one of these alphabets, it becomes obvious even during 
solution that each value solved yields two values. For instance, if 
cipher "A" = plain TT, then in this position cipher T necessarily is 
equal to plain "A". In the final solution this circumstance naturally 
facilitates matters, i. e., it is a weakness. 

2) If a machine is available in which three wheels turn between 
a f ixod wheel at the right and at the left, then the whole maze is run 
through after 263 - 26 s a 16,900 steps. Fur due to the rests (Hasten) 
on the bodies in the form of a circular saw, the progression was not 
like that in a numbering machioe but instesd 26 x 26 substitution 
alphabets are skipped. This leads therefore to a shortening of the 
period even though the progression suffers a distortion in this way. 

3) Assuming the case that a machine is allowed to be used for an' 
entire day with the same wheel position and rest position ( Rastecstelluzy ) 
and all messages are enciphered in exactly the same wheel position, for 
instance all beginning in the position 010101, then the solution of such 
messages calls for little effort if some 70 are available while solution 
is possible even with fewer messages, assuming that the cryptanalyst 
already has some experience and training. In order to avoid any such 
piling up of messages at one point in the wheel period, all messages 
really ought to be distributed quite evenly over the period. However, 
that can only be achieved in traffic controlled by a single station, not 
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otherwise. It is most appropriate to instruct the stations to take 
random message keys because it is thou probable that the day's traffic 
will be distributed over the entire parted so evenly that no dangarous 
piling up vill occur. 

h) Nevertheless this security bj no means satisfied current demands. 
For nobody can tell how great the daily volume of traffic vill becoma 
in a future war, all estimates of this kind were absolutely without real 
basis and therefore inadequate. The ideal would have been tc be able to 
undertake currently a permutation of the circuits J E. g. by interrupting 
the leads of the fixed wheel at the right and constantly shifting the pole 
connections, that is if one could rake the most varied connections between 
them. This idee led to the development and introduction of the plugboard 
(Stackerbrett) with 26 Jacks in the front of the machine. When the jacks 
are- not bridged over, the machine works in normal position so to speak. 

5) If I key a message in a predetermined position without bridging 
these Jacks and then key the same massage once again in the same position 
but using one bridge, uniting - let us say > jacks "A" and "E% then the 
two cipher texts will be alike for the cost part, i. e., just this dis- 
covery by itself shows that a single bridge is by no means adequate to 
cause in the substitution alphabet sequence of the period a distortion 
which cannot be recognized. Even when using two or three bridges there 
are not sufficiently great changes to allow us to say that the device has 
not/ become secure. Since in calculating the bridges combinations are 
encountered, the aartmum - so far as I can recaT today - is found not with 
13 bridges but with a smaller number. 

6) There is nothing go erroneous as to assume regarding an 
opponent that he vill not notice weaknesses of a cryptographic system 
and therefore fail to make use of the* to the full. Consequently Chi 
assumed as a Batter of principle that the Enigma would fall undamaged into 
enemy hands along With the instructions for its use and at least a few keys. 
It was also obvious that the enemy would likewise have radiograms. It wee 
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also self -evident that accident, regarding which one can never tell 
mathematically '/nan it will occur but merely knows that it occurs, 
will some Iday give the enemy a pcaaibility of deciphering individual 
Enigma measagea, oven if the machine is used correctly. What really 
had to be guarded against was that tbe enemy should road the Snigaa 
messages currently; In this connection it was also clear to Chi that 
Enigma messages with the same or similar key poaitlona could not fail to 
contain ao-callod parallel passages, which in turn were a weakness 
inasmuch aa by their aid affine messages could be worked on with success: 
one merely needed to superimpose seseagea with parallel passages correctly, 
then all elements in a column were probably from one and the same substitu- 
tion alphabet. 9 For example 



-aldefro xdert cafhji;. . 

•llgtfde zdert vgftrea 

.aid free bhiklog. 

.xzzefrc cafholj. 



Here it was only neceoaary to rantfbe? that, dm to the dropping out of ■ 
certain alphabets, the cipher eleasnts of all coiumna across the entire 
width did not really need to coos from tie ease rociproc* substitution 
alphabets. For this reaaon the possibility of the occurrence of euch 
parallel passagea should be avoided! Parallel pasaagea ariae through the 
ase of like letters at Identical positions in the pericd. The Identical 
sequences of letters result froa the choice of the same word. The mili- 
tary language ia poor in words! Again and again M meet the words f 
Gegner (enemy), feindlich (hostile) , Aggprtff Cattack) , Munition (edition) , 
etc. And in these worda the scat frequent Qean letters also occur, e. g.r 
M»WM«M*. If bridges are introduced it is desirable to 
disturb these frequent letters. 

7) Nov the number of bridges which can be uaad ia United by the 
construction because the plugboard ia located close to the front of the ' 
cover and not many oablea can be accomodated in this narrow apace. For 
thia reason recourse was also had to the portion of the wheels. The 
thr«e movable wheels can be shifted about in 3 ! ways, ao that with reference 
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to the initial sequence five new sequences are possible. But each new 
sequence virtually signifies a net; period of seme 17,000 steps so that 
for one day we should have available a period of lOt.OOO steps, which 
was considered adequately secure if enough bridges vers used. Haturally 
one also thought of inserting new wheels in the machine from time to time. 
That was the practice, naturally provision was also made that the message 

• 

key chosen in each case must be dieguised before transmission in order not 
to make decipherment too easy for the enemy, because if he was already 
deciphering the traffic he would then have to fuss around with the messages 
before he recognized the affinity of messages belonging together. And in 
the opinion of Chi this would as a rule have required so much time that he 
could not gain any immediate tactical use from the messages solved. More 
was not asked for. 

8) Beyond that there were naturally also theoretical studies which 
reached their climax by Fosing the question whether a single Enigma mes- 
sage can be solved if the machine is known and the keying instructions 
are known. Analytically this question was answered in the affirmative; 
I intentionally avoid saying "theoretically" because correct theory also 
has correct practice as a result or else there is an error in the theory 
or in the practice. And the answer ran -that the individual Enigma mas- 
sage can be solved if I have the proper machine in my hands; the wheel 
position and all other settinga may be unknown to me ; I simply have -to 
have in my hands a machine containing the wheels actually used. But what 
was carried out in this simplified experiment would in actual work have 
required a vast number of people or a gigantic battery of machines 
(mechanical aids to decipherment) eo that under normal circumstances one 
wulu 005 COUQt «a any practical uee Jot the messages/. 

Since I have not occupied myself with these matters for a very long 
time I can only give a few leading ideas today. If it is assumed that I 
have the machine actually used and messages enciphered on this machine, 
it may be assumed, let us say, that in one of the messages the word 
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"Kegimsnt" occurs. law the attempt nay bo made of writing every 3 
successive letters of the cipher text beneath the plain text* 
the Enigma would then have to be stepped until at the proper point in 
the cipher text it gave the plain text, "Begiaont", and It would also have 
to give rational text before and after this wort. It la clear that such 
a task would not only call for a great deal of effort but would also 
cost time. And if this vast expenditure really did bring success, then 
with e new message, a new wheel setting and new plus connections, the 
game would begin all over again.' Chi told itself that in a modem war 
one cannot reckon with such loss of time in deciphering - and therefore 
regarded the machine as adequately secure, if correctly handled. 

Another Dotted, which is more clever, started with the fact that 
the most frequent letter in Gorman is 2. Hence if I write out two nes- 
sages in the eane key, one below the other, then there Will always be too 
like letters one below the other and of these a not inconsiderable portion 
will correspond to plain Z. Working from the weak point, the next step 
was to assume that in Gorman en N is likely to follow B, Again it was 
necessary to fuss around with the machine unci! nose of these assumptions 
proved correct. But even in this case the leas of time and energy is QO 
great that it stands in no rational relation to the expected results, 
always assuming that current reading cf the meseages will not be. mado 
possible by aither of the method 8. I can no longer go into detail • 
regarding the very clever study. Tee individual lines of reasoning are 
likewise so complicated for me that I should only feel safe if I could 
regain the fresh impression. But after years spent in other work and in 
vie,, of the fact that I only engagsd in the early stage of these studies, 
eUfe tin* were later taken over by others who could devote themselves 
exclusively to investigating such problems, both my memory and my 
imagination fail me today, without the device at hand, when I attempt to 
reconstruct the several operations in such vivid and truthful fashion as 
to enable me to give the exact course of solution. 
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9) The only disadvantage of the little Hagelin, for instance the 
B-211, lk that it turns out the cryptograms much too slowly to satisfy 
present- Say demands for speed. In comparison with the Enigma it has 
the advantage of being considerably smaller, of having a period which 
far exceeds that of the Enigma, - I believe it is around 3,000,000 
steps, the exact number would have to be computed using the model. 
Whereas in the case of the Enigma the course of the period is always 
constant in small portions in spite of the rests (Eastoo), the pin wheels 
of the Hagelin provide for an unsteady run-off of the period, if we 
conceive of the single step s 3 quanceo as a function of a normal period. 
Through tho riders, especially if they are all easily moved, an additional 
easily handled variant is introduced into the rigid system, which is 
stronger than in the case of the Enigma. Hence, in spite of certain 
similarities in idea and oven constructional kinships the Hagelin repre- 
sents an Geaoatial inproTossnt of a aubetitution system in comparison 
with the Enigma: the Hagelin is the more modern dovico anyway; developed 
and built when the early experience with the Enigma was available: the 
Enigma nevertheless still has the distinction of having been the first 
cipher machine which was put into practical use and satisfied modem 
security demands. It is characteristic of both machines that when used 
improperly they yiold usages w2ai ch can be solved if in volume; however, 
this in not an organic fault but an evil which can be avoided without 
further ado if the machino is expertly handled. Hagelin's machine does 
not work with reciprocal alphabets. 

17 ' IS^^LiTS^ °2J. X J^f^ Mc MCOri^ studies, investigations, 
ano records made by HDECZBQZABTC What became of these studies? 

***ed repeatedly. These studies must have been burned 
either in Berlin or in Halle or Werfon according to orders. No lists were made 
and no reports of destruction were submitted. 

18. What do you know of MEHZER'e Schluoaselschei be and Schluessei kaeten? 
Can you describe their method^f^ncipb^rmeit? - 

I assume tho following to he known: 
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1. Use of double transposition and similar transposition systems in 
the German Araw after World War I, 

2. Use of the Enigma with leaps in the German Arajy after World War I, 
3- The theoretical and material advantages and disadvantages of 

Systems 1 and 2. 

The criticisms mad© during almost twenty years in numerous conferences, courses 
and discussions pursued the goal of creating for the use of troops not equipped 
with cipher machines a device possessing the following qualities: 

a. Light weight and snail size 

b. Trouble sources - none 

c. Easv of operation 

d . Derivation of the secret or plain toxt by some simple rule, in 
any event by one operation 

e. Security of the secret tacts against cryatanaly3is 

f . Simple distribution of keys 

g. Simple administration 

Hone of the hand systems, however clever, satisfied these conditions. (The 
very intriguing French small signal table with approximately 1,000 entiles 
and with numerous blank groups for ad hoc and ad libitum entries was excellent, 
as experience had shown, but called for an organization with extensive printing 
and distributing facilities). For this reason some other course had to be taken, 
numerous proposals made by lay inventors for the use of linear or disc slides 
had to be rejected as unser7iceablo, even when - to increase cryptographic 
security - the secret test became a function of the plain text. For precisely 
in these cases an error In eccipherment continues as a function throughout the 
entire telegram. The only idea which proved of theoretical and practical valtie 

ca the . m _ _ — „„ w uae of a substitution system with 

a periodic course but with a long period. The technical problem was therefore 
to nechanize this idea. For reflection shows that even with a primitive linear 
elide 

Plain myiunbshvtalxdqjgrkcpzfwoe 

Cipher Pucivdznqoramyjbvxfakelhtgpucivdznqo 
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and an aperiodic numerical key, for Instance i 1 3 2 0 3 1 5 2 6 410 

* 3 1 0 3 a cryptogram can be derived for which analysis can 

indicate no solution although It goes back to the MidcJle Ages, (to Irltheln, 
according to Blaise de Viginere,hm=n 9.2.1A6S, died I6.12.15l6). 

If It wars possible to employ a virtually Infinite and aperiodic digit 
sequence to derive the red slide, then in effect the desired device would bo 
created . 

The minimum length of such a device had it3 natural limits however: if 
the alphabets were to be Interchangeable, then the cells must to capabla of 
inscription. Using cello one cm wide would have given a length of 52 cm or 
acre, due to the doubling of the oce alphabet. However, this could net be 
thought of? A way out of the difficulty was found by dividing both alphabets 
in the following mannerr 



M 


Y 


1 


U 


V. 


B 


s 


H 


V 


T 


A 


L 


X 




P 


n 
-* 


r 


I 


v 


D 


n 
—> 


H 




0 


H 


A 


;? 




u 
















n 


jj 


B 


m 




o 


m 










a 




1 


B |w 












a 




F 


wjo 


s 





With such an arrangement the device could be reduced to a total length 
Of about 30 cm. But a dleadvantsge, the effects of which wore not yet known, 
was the coupling of two black and two red letters in each case. The working 
cut of the drive mechanism was mere difficult in such a limited space. 

A spring supplied the driving power, it was released by a push button. 
When at rest the movable slide had to be firmly blocked. The final step of the 
slide, which was drawn out by hac3 each tine, could not be ambiguous. Consequent, 
ly great mechanical precision was required everywhere in the device. 

To mechanize the aperiodic coarse, recourse vas had to co-callefi pin wheels 
CBolaenraede r ), such as are used to achieve the ease goal in the Eagelin device, 
and to the requisite - . leaeats were so conveniently 

reached from the bottoa of the device that even the clumsy finger of a soldier 
could service the individual parts. 

I no longer know how many gear wheels and how many pin wheels the device 
had. But four gear wheels with 17, 19, 21 and 2 3 teeth would already give a 
period of 156,009 steps. I assume that at least five gear wheels were envisioned 
and probably a like number of pin wheels, but this is not essential. 
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The effect of the pin wheels is naturally to shorten the total period . 
Likewise there are favorable and unfavorable pin positions. The problem of 
the favorable jpin positions was the subject of special speculation. And in 
practical use every cipher clerk vculd have to have a table showing the 
"forbidden"- pin settings. This table had already been computed at OBf/Chi. 

An experimental Menzer Slide (Menzerachiebe) about 17 cm long, about 8 
cm wide and about 6 cm high had been built, but with a much shorter period. 
The Wanderer-Werke had been entrusted with manufacture. The Army never got 
beyond the stage of experimental devices. At least I never heard that even a 
f irst set of these devices reached a try-cut with the troops. All the 
experimental models suffered from the fact that the device was always jassiing 
and therefore was of no practical use. 

In practical use the following rules were to bo observed: 

1. A completely new inscription at least once a day, 

2. A new pin setting and gear sotting for each massage. 

The choice of those two elements should be loft to the code clerk so as to 
guarantee as individual use as possible. Of course these data had to be given 
in each message by as indicator group. I never sot any completed book of 
instructions or directions for U3e. 

In my opinion the device satisfied the demands for temporary crypto- 
graphic security but to my knowledge no definitive analytical study had as 
yet been completed. 

19. In the Schluosselkaston is thu slide returned after each 
encipherrent or only when necessary? 

I do not know this system or at any rate no lonser have it in mind. How- 
ever, any necessary aids for encipherment end decipherment cannot possibly be 
returned as soon as the job 1* -T>har is involved, 

then there would be no possibility of returning It! To whom, for instance, ' 
should part of the cryptographic system of German agents in Sweden be turned 
in? From the way the question was put I believe I can assume that the entire 
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principle of the Schluesaolkaston is still io need of clarification. 3 ^ 

I 

III. SECBET IMS ABD micsoeeotcgmesy 
20. What do you know about secret ink and micropkotcgraphy? 

I do not understand anything about serious secret InkB and know no more 
than can be found in any "Book of Magic" for toys or in any encyclopedia. 
Secret inks were solely of concern to the Abwehr . Likesri.se microphotograpby. 
Just once, when I \ras getting some acetone at the Abrehr laboratory I looked 
through a microscope and recognized a map of Germany in what to the naked eye 
looked like an ordinary period, Why it had been izado I ao not know. It was 
shown to E8 simply to prove how capable microphotcgraphy is. 

In the First World War a white powder, of which I do not know the com- 
position, was dissolved in ordinary water. Ono wrote with this eolution on 
a paper wi^.ch would take Ink. As soon as the ink was dry, the writin 3 was 
gone over with a solution of sal oaraoniac. Upon development the writing was 
supposed to come out if the paper was immersed in a dilute solution of acetic 
acid. B^ing the First World War it i.^as claimed, as a rule, that a secret 
ink isuat bo so constituted ao to bo utterly destroyed cksaicaily if the ensmy 
attacked it with a bleach; or: uso such bleaches as will not destroy any 
writing that may bo present. Whether this notion has any validity tocay. whsn 
a multitude of otherwise invisible substances caa be revealed by quartz lamps, 
is beyond my knowledge. 



22 ^? er S J?* 360 ^parently on a mistranslation by the intor- 
rogaoor o. tne word "returned" which was rendered "zuruecksegehea" 1 or 
ep-ven back" vnereas some such term as "zurueckgesogen" = "pulled bpek" 
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